Privacy Policy

Information we collect

• Account data — your email address, display name, and a salted hash of your password (we never store the password itself). If you sign in with GitHub or Google, we receive your email and name from that provider.
• Documents — resumes, cover letters, and job descriptions you create or upload. These are stored so you can access them across devices.
• Usage and billing data — credit balances, feature usage, and subscription status. Payment card details are handled entirely by Stripe and never touch our servers.

How we use your information

• To provide the service: storing documents, matching resumes to job descriptions, and generating tailored content.
• To process AI features: the text of your resume and job description is sent to our AI model provider to generate results. It is not used to train models.
• To send transactional email such as verification codes (via Resend).
• To manage subscriptions and payments (via Stripe).
• To credit your account for completed surveys (via CPX Research, see below).

Third-party services

We share data only with the processors needed to run the service:

• Supabase — database hosting for accounts and documents.
• Vercel — application hosting.
• Stripe — payment processing.
• Resend — transactional email delivery.
• CPX Research— optional paid surveys on our "Earn credits" page. If you choose to take surveys, your user ID is shared with CPX Research and their own privacy policy applies to the data you provide in surveys.
• AI model provider — processes resume and job description text to generate AI results.

We do not sell your personal information.

Browser extension

Our optional Chrome browser extension ("JDMatcher") helps you match your resume to a job posting without leaving the job board. Its data handling is intentionally minimal:

• Resume you save in the extension is stored only locally in your browser (chrome.storage.local). It is never transmitted to our servers.
• Job description text on supported job boards (LinkedIn, Indeed, Glassdoor, Seek) is read from the page you are viewing and used to compute a keyword match score locally, in your browser. This text is not sent to our servers for the in-page score.
• Only when you choose to run an AI deep match is the job description sent to resumejdmatcher.com to generate AI results, as described elsewhere in this policy.
• The extension requests access only to the supported job-board sites and to local storage. It does not track your browsing, read unrelated sites, or sell or share extension data with any third party.

Cookies

We use a single essential session cookie to keep you signed in. We do not use advertising or cross-site tracking cookies.

Data retention and deletion

Your data is kept while your account is active. You can delete your account at any time from Account settings, which permanently removes your account and documents. You can also email us to request deletion.

Security

Passwords are hashed with scrypt, sessions are stored as hashed tokens, and all traffic is encrypted with TLS. No method of storage is 100% secure, but we work to protect your data with industry-standard measures.

Children

JDMatcher is not directed at children under 16 and we do not knowingly collect their data.

Changes and contact

We may update this policy and will change the date above when we do. Questions or requests: support@resumejdmatcher.com.